Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.mft
File: BOZbg9ITFfi6dXjoi984Eyld3go.mft (raw, json)
Hash identifier: 2b3Usm21S/Ec3molDtYMGx9a7TKegNBDDrV7SSWbQ84=
Subject key identifier: 37:CC:C4:8C:1C:90:A3:58:C0:ED:47:CD:74:64:05:06:17:9B:3F:D6
Authority key identifier: 04:E6:5B:83:D2:13:15:F8:BA:75:78:E8:8B:DF:38:13:29:5D:DE:0A
Certificate issuer: /CN=04e65b83d21315f8ba7578e88bdf3813295dde0a
Certificate serial: 0198D5BBFFFDCB60DEB7E4CC27F37DEBA9EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BOZbg9ITFfi6dXjoi984Eyld3go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.mft
Manifest number: 0D66
Signing time: Sat 23 Aug 2025 07:02:04 +0000
Manifest this update: Sat 23 Aug 2025 07:02:04 +0000
Manifest next update: Sun 24 Aug 2025 07:02:04 +0000
Files and hashes: 1: BOZbg9ITFfi6dXjoi984Eyld3go.crl (hash: CaHXI8ChqUrJmnf2p8NHo+TzwvywTgswrG8NG3OdSBA=)
2: E9Q22GIdMyoqpYS3_A3Sv4bLQrU.roa (hash: U3UIBvBEgw3rK3s+0sDC6RFjCDwgftn5pIAbSSrZ/Fw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.mft
rsync://rpki.ripe.net/repository/DEFAULT/BOZbg9ITFfi6dXjoi984Eyld3go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:ff:fd:cb:60:de:b7:e4:cc:27:f3:7d:eb:a9:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04e65b83d21315f8ba7578e88bdf3813295dde0a
Validity
Not Before: Aug 23 07:02:04 2025 GMT
Not After : Aug 24 07:02:04 2025 GMT
Subject: CN=37ccc48c1c90a358c0ed47cd74640506179b3fd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:bd:e6:db:60:1c:d4:35:8d:b4:24:ec:06:f1:
f7:9f:1c:cd:20:fe:7c:03:3a:5e:fa:45:cf:95:ff:
cb:35:db:41:87:d2:4e:70:c7:a9:c5:0d:9c:ee:c5:
51:54:a4:c2:31:98:26:a1:03:61:48:76:49:9a:e9:
24:df:90:df:c1:f9:55:f3:1c:fe:00:84:e5:da:c9:
6c:c0:65:ca:80:7c:01:34:29:23:c9:84:1b:84:b9:
64:1a:cf:d9:b1:81:27:87:60:cd:25:e9:10:c1:f8:
ec:6e:e4:91:22:65:c0:6f:bb:4c:ab:ad:69:da:98:
5f:84:c1:80:6e:20:fb:b2:8f:5e:20:0f:24:83:0d:
7f:6c:58:9d:a7:87:e5:98:59:5f:3f:1f:3a:ec:5c:
25:bb:2c:3c:3f:69:b0:53:00:6f:e1:54:81:e4:a4:
e2:0f:75:cd:68:de:ae:f3:2f:bf:e8:61:00:67:85:
7a:4b:8c:7f:9f:8b:b2:30:9e:cb:c1:30:e1:72:85:
f5:fe:da:1e:82:a5:59:1f:03:16:ea:fb:a3:10:6c:
0d:1e:12:18:ae:df:43:82:16:aa:88:35:94:2c:f3:
2e:0e:e4:1f:fe:7d:0c:52:4d:1b:2f:87:39:91:52:
61:b5:2e:1c:56:32:e0:bd:09:37:7d:21:fd:39:67:
99:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:CC:C4:8C:1C:90:A3:58:C0:ED:47:CD:74:64:05:06:17:9B:3F:D6
X509v3 Authority Key Identifier:
keyid:04:E6:5B:83:D2:13:15:F8:BA:75:78:E8:8B:DF:38:13:29:5D:DE:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOZbg9ITFfi6dXjoi984Eyld3go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:92:4d:ed:d7:d4:63:20:6f:12:bc:3b:bf:04:81:1e:f1:c1:
b4:a4:12:96:ae:42:df:19:37:a5:5e:3c:e9:c6:4e:2a:5e:9e:
8c:0e:29:03:58:99:a6:3c:e5:35:aa:c2:08:88:9a:41:af:04:
84:5d:41:e8:c8:78:3c:85:19:19:b8:e5:05:8b:3d:70:79:94:
e3:2c:17:ec:9b:c4:53:f5:22:d6:34:e2:96:b9:fa:8a:98:c4:
f4:8f:47:79:b6:f9:db:d5:a9:5c:11:26:68:ed:1d:9d:e7:64:
a9:89:78:ab:aa:69:7c:83:8a:c8:81:66:0e:d1:cb:8a:b4:9b:
51:bb:d8:41:f7:3a:03:93:af:55:58:ec:c6:1e:25:0c:a5:66:
23:f8:5a:9d:3c:7d:a4:0e:a2:b5:3e:1a:4d:b5:7d:8f:2c:98:
f5:ad:c4:1c:2d:a1:88:88:b2:e9:09:8b:7c:00:9c:ae:b4:b0:
48:28:e6:d8:16:db:4e:5d:a6:e0:96:68:ba:4a:41:b4:1b:65:
33:4d:59:91:e4:7b:65:2f:74:7d:bd:f3:8c:f9:b0:8c:2f:13:
4c:da:22:be:bb:07:90:a8:4a:9d:4b:31:f5:16:e6:6d:79:7a:
5e:1d:bc:54:f1:83:b2:76:68:b3:24:06:bc:88:bf:2f:35:39:
32:d5:f1:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu//9y2Det+TMJ/N966nuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0ZTY1YjgzZDIxMzE1ZjhiYTc1NzhlODhiZGYzODEzMjk1
ZGRlMGEwHhcNMjUwODIzMDcwMjA0WhcNMjUwODI0MDcwMjA0WjAzMTEwLwYDVQQD
EygzN2NjYzQ4YzFjOTBhMzU4YzBlZDQ3Y2Q3NDY0MDUwNjE3OWIzZmQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7L3m22Ac1DWNtCTsBvH3nxzNIP58
Azpe+kXPlf/LNdtBh9JOcMepxQ2c7sVRVKTCMZgmoQNhSHZJmukk35DfwflV8xz+
AITl2slswGXKgHwBNCkjyYQbhLlkGs/ZsYEnh2DNJekQwfjsbuSRImXAb7tMq61p
2phfhMGAbiD7so9eIA8kgw1/bFidp4flmFlfPx867Fwluyw8P2mwUwBv4VSB5KTi
D3XNaN6u8y+/6GEAZ4V6S4x/n4uyMJ7LwTDhcoX1/toegqVZHwMW6vujEGwNHhIY
rt9DghaqiDWULPMuDuQf/n0MUk0bL4c5kVJhtS4cVjLgvQk3fSH9OWeZWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDfMxIwckKNYwO1HzXRkBQYXmz/WMB8GA1UdIwQY
MBaAFATmW4PSExX4unV46IvfOBMpXd4KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQk9aYmc5SVRGZmk2ZFhqb2k5ODRFeWxkM2dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9jZGRiNjEtMTJhMC00NmJkLTlmYjct
M2U3ODFkYzFlN2U5LzEvQk9aYmc5SVRGZmk2ZFhqb2k5ODRFeWxkM2dvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9jZGRiNjEtMTJhMC00NmJkLTlmYjctM2U3ODFkYzFlN2U5
LzEvQk9aYmc5SVRGZmk2ZFhqb2k5ODRFeWxkM2dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEJJN7dfU
YyBvErw7vwSBHvHBtKQSlq5C3xk3pV486cZOKl6ejA4pA1iZpjzlNarCCIiaQa8E
hF1B6Mh4PIUZGbjlBYs9cHmU4ywX7JvEU/Ui1jTilrn6ipjE9I9Hebb529WpXBEm
aO0dnedkqYl4q6ppfIOKyIFmDtHLirSbUbvYQfc6A5OvVVjsxh4lDKVmI/hanTx9
pA6itT4aTbV9jyyY9a3EHC2hiIiy6QmLfACcrrSwSCjm2BbbTl2m4JZoukpBtBtl
M01ZkeR7ZS90fb3zjPmwjC8TTNoivrsHkKhKnUsx9RbmbXl6Xh28VPGDsnZosyQG
vIi/LzU5MtXxwQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:18:55 2025 by rpki-client